[Bro-Dev] Broccoli question
Randy Caldejon
randy at packetchaser.org
Thu Dec 19 15:12:19 PST 2013
On Dec 19, 2013, at 6:09 PM, Siwek, Jonathan Luke <jsiwek at illinois.edu> wrote:
>
> On Dec 19, 2013, at 2:49 PM, Randy Caldejon <randy at packetchaser.org> wrote:
>
>> Can somebody tell me if BRO_TYPE_TABLE is supported at part of a record?
>
> Regardless of whether it’s part of a record, I don’t think broccoli can create and send tables (as well as sets/vectors). You may have to send individual key-value pairs and reconstruct the table on the Bro-side.
>
> - Jon
Ok, that's the path that I'll take. Thanks for confirming.
-- Randy
More information about the bro-dev
mailing list